Musk deleting x checkmarx is also very kindergarten sandbox niveau
January 16, 2025 at 4:41 AM
Musk deleting x checkmarx is also very kindergarten sandbox niveau
Insert this is fine gif here: Bitwarden, a widely-used open source password manager, has been compromised via its CLI tool.
socket.dev/blog/bitward...
socket.dev/blog/bitward...
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
socket.dev
April 23, 2026 at 5:35 PM
Insert this is fine gif here: Bitwarden, a widely-used open source password manager, has been compromised via its CLI tool.
socket.dev/blog/bitward...
socket.dev/blog/bitward...
🚨 Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
socket.dev
April 23, 2026 at 1:21 PM
🚨 Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
🧵
Yesterday marked 2 months of being employed by Checkmarx and working on Open Source ( @zaproxy.org ).
I'm having an absolute blast.
1/5
#OpenSource
Yesterday marked 2 months of being employed by Checkmarx and working on Open Source ( @zaproxy.org ).
I'm having an absolute blast.
1/5
#OpenSource
December 12, 2024 at 12:19 PM
🧵
Yesterday marked 2 months of being employed by Checkmarx and working on Open Source ( @zaproxy.org ).
I'm having an absolute blast.
1/5
#OpenSource
Yesterday marked 2 months of being employed by Checkmarx and working on Open Source ( @zaproxy.org ).
I'm having an absolute blast.
1/5
#OpenSource
December 20, 2025 at 11:54 AM
After Aqua Security's Trivy vulnerability scanner got hacked last week, security firm Checkmarx says its KICS code scanner was also hacked
🫣
checkmarx.com/blog/checkma...
🫣
checkmarx.com/blog/checkma...
Checkmarx Security Update
We are writing to inform you that Checkmarx has identified a recent supply chain security incident involving the KICS open-source project, and two specific Checkmarx plugins distributed via the OpenVS...
checkmarx.com
March 24, 2026 at 11:57 AM
After Aqua Security's Trivy vulnerability scanner got hacked last week, security firm Checkmarx says its KICS code scanner was also hacked
🫣
checkmarx.com/blog/checkma...
🫣
checkmarx.com/blog/checkma...
Heads up! Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
socket.dev
April 23, 2026 at 1:32 PM
Heads up! Bitwarden CLI 2026.4.0 was compromised as part of the ongoing Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
We’ll continue updating our coverage as more details are confirmed.
socket.dev/blog/bitward...
Checkmarx hack update:
"We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace"
checkmarx.com/blog/ongoing...
"We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace"
checkmarx.com/blog/ongoing...
Update: Ongoing Checkmarx Supply Chain Security Incident
Incident Update: Saturday, May 9, 2026 We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace. We are in the process of publishing a new vers...
checkmarx.com
May 10, 2026 at 8:23 PM
Checkmarx hack update:
"We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace"
checkmarx.com/blog/ongoing...
"We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace"
checkmarx.com/blog/ongoing...
🚨 DEVELOPING STORY: Malicious artifacts found in the official
Checkmarx KICS Docker Hub repository and VS Code extensions.
Attackers overwrote existing image tags (including v2.1.20 and alpine) and pushed a fake v2.1.21 tag with no corresponding upstream release.
socket.dev/blog/checkma...
Checkmarx KICS Docker Hub repository and VS Code extensions.
Attackers overwrote existing image tags (including v2.1.20 and alpine) and pushed a fake v2.1.21 tag with no corresponding upstream release.
socket.dev/blog/checkma...
Malicious Checkmarx Artifacts Found in Official KICS Docker ...
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.
socket.dev
April 22, 2026 at 5:18 PM
🚨 DEVELOPING STORY: Malicious artifacts found in the official
Checkmarx KICS Docker Hub repository and VS Code extensions.
Attackers overwrote existing image tags (including v2.1.20 and alpine) and pushed a fake v2.1.21 tag with no corresponding upstream release.
socket.dev/blog/checkma...
Checkmarx KICS Docker Hub repository and VS Code extensions.
Attackers overwrote existing image tags (including v2.1.20 and alpine) and pushed a fake v2.1.21 tag with no corresponding upstream release.
socket.dev/blog/checkma...
Checkmarx supply chain attack impacts Bitwarden npm distribution path
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
Checkmarx supply chain attack impacts Bitwarden npm distribution path
Bitwarden CLI hit by the Checkmarx supply chain attack. Version 2026.4.0 shipped malicious code in bw1.js via a compromised GitHub Action.
securityaffairs.com
July 4, 2026 at 6:54 AM
Checkmarx supply chain attack impacts Bitwarden npm distribution path
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
packages)
- Teale-io (eslint-config)
- AIRTM (uuid-base32)
- PypeSteam (floating-ui-dom)
March 23rd:
- Checkmarx
March 24th:
- LiteLLM
March 27th:
- Telnyx
- Teale-io (eslint-config)
- AIRTM (uuid-base32)
- PypeSteam (floating-ui-dom)
March 23rd:
- Checkmarx
March 24th:
- LiteLLM
March 27th:
- Telnyx
March 27, 2026 at 5:54 PM
packages)
- Teale-io (eslint-config)
- AIRTM (uuid-base32)
- PypeSteam (floating-ui-dom)
March 23rd:
- Checkmarx
March 24th:
- LiteLLM
March 27th:
- Telnyx
- Teale-io (eslint-config)
- AIRTM (uuid-base32)
- PypeSteam (floating-ui-dom)
March 23rd:
- Checkmarx
March 24th:
- LiteLLM
March 27th:
- Telnyx
ZAP by Checkmarx 2.16.0 has just been released. It includes a brand new spider, detachable tabs, policy definitions, and lots more...
See www.zaproxy.org/blog/2025-01...
See www.zaproxy.org/blog/2025-01...
ZAP 2.16.0
ZAP 2.16.0 has just been released. It includes a brand new spider, detachable tabs, policy definitions, and lots more…
www.zaproxy.org
January 10, 2025 at 5:17 PM
ZAP by Checkmarx 2.16.0 has just been released. It includes a brand new spider, detachable tabs, policy definitions, and lots more...
See www.zaproxy.org/blog/2025-01...
See www.zaproxy.org/blog/2025-01...
Checkmarx discloses a new supply chain attack on its KICS security scanner
New malicious versions were spotted for the Docker image, GitHub Action, VS Code extension, and Developer Assist extension
checkmarx.com/blog/checkma...
New malicious versions were spotted for the Docker image, GitHub Action, VS Code extension, and Developer Assist extension
checkmarx.com/blog/checkma...
Checkmarx Security Update: April 22
new development in the supply chain security incident that our team is actively investigating and addressing. We deeply value the trust you place in Checkmarx and are committed to keeping our customer...
checkmarx.com
April 23, 2026 at 9:27 AM
Checkmarx discloses a new supply chain attack on its KICS security scanner
New malicious versions were spotted for the Docker image, GitHub Action, VS Code extension, and Developer Assist extension
checkmarx.com/blog/checkma...
New malicious versions were spotted for the Docker image, GitHub Action, VS Code extension, and Developer Assist extension
checkmarx.com/blog/checkma...
IaCのコード内に脆弱性、コンプライアンス違反、設定ミスなどがないかチェックするツール。サポートするプラットフォームはTerraformやk8s、Ansible、CDKなど幅広いが、その中にニフクラがあっておーとなった。
GitHub - Checkmarx/kics: Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx. - Checkmarx/kics
github.com
June 15, 2025 at 5:05 AM
IaCのコード内に脆弱性、コンプライアンス違反、設定ミスなどがないかチェックするツール。サポートするプラットフォームはTerraformやk8s、Ansible、CDKなど幅広いが、その中にニフクラがあっておーとなった。
Va falloir comprendre très très très rapidement un truc : la CI/CD, faut arrêter maintenant
Surtout celles qui upgrade/build/deploy/release en auto…
socket.dev/blog/bitward...
Surtout celles qui upgrade/build/deploy/release en auto…
socket.dev/blog/bitward...
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
socket.dev
April 24, 2026 at 12:14 PM
Va falloir comprendre très très très rapidement un truc : la CI/CD, faut arrêter maintenant
Surtout celles qui upgrade/build/deploy/release en auto…
socket.dev/blog/bitward...
Surtout celles qui upgrade/build/deploy/release en auto…
socket.dev/blog/bitward...
組織の大半が脆弱なコードを出荷していることが判明 Checkmarx社調査より
#CybersecurityNews
www.infosecurity-magazine.com/news/majorit...
#CybersecurityNews
www.infosecurity-magazine.com/news/majorit...
Majority of Organizations Ship Vulnerable Code, Study Finds
A new Checkmarx study reveals that AI-generated code now accounts for over 60% of codebases in some companies, much of which contains known vulnerabilities
www.infosecurity-magazine.com
August 15, 2025 at 11:10 PM
組織の大半が脆弱なコードを出荷していることが判明 Checkmarx社調査より
#CybersecurityNews
www.infosecurity-magazine.com/news/majorit...
#CybersecurityNews
www.infosecurity-magazine.com/news/majorit...
🚨 If you use Bitwarden, please immediately read: socket.dev/blog/bitward...
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
socket.dev
April 23, 2026 at 4:22 PM
🚨 If you use Bitwarden, please immediately read: socket.dev/blog/bitward...
Checkmarx confirms that its supply chain attack was carried out by Lapsus$ after the group leaked their data over the weekend
I'm wondering if they knew before that... or they found out like the rest of us from the leak
checkmarx.com/blog/supply-...
I'm wondering if they knew before that... or they found out like the rest of us from the leak
checkmarx.com/blog/supply-...
April 28, 2026 at 12:57 AM
Checkmarx confirms that its supply chain attack was carried out by Lapsus$ after the group leaked their data over the weekend
I'm wondering if they knew before that... or they found out like the rest of us from the leak
checkmarx.com/blog/supply-...
I'm wondering if they knew before that... or they found out like the rest of us from the leak
checkmarx.com/blog/supply-...
Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace.
Official CheckMarx Jenkins package compromised with infostealer
Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace.
www.bleepingcomputer.com
May 11, 2026 at 10:03 PM
Checkmarx warned over the weekend that a rogue version of its Jenkins Application Security Testing (AST) plugin had been published on the Jenkins Marketplace.
Checkmarx supply chain attack impacts Bitwarden npm distribution path
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
Checkmarx supply chain attack impacts Bitwarden npm distribution path
Bitwarden CLI hit by the Checkmarx supply chain attack. Version 2026.4.0 shipped malicious code in bw1.js via a compromised GitHub Action.
securityaffairs.com
June 26, 2026 at 5:42 PM
Checkmarx supply chain attack impacts Bitwarden npm distribution path
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
securityaffairs.com/191215/malwa...
#Kyberturvallisuus #SupplyChain #OpenSource
3 Top Remote Dev Jobs Found in Last 24h. See:
◆ Checkmarx | Senior Solutions Engineer
◆ Location: Italy
◆ Remote | Full Time
See all 21695 jobs → link in bio
◆ Checkmarx | Senior Solutions Engineer
◆ Location: Italy
◆ Remote | Full Time
See all 21695 jobs → link in bio
September 24, 2026 at 12:00 PM
3 Top Remote Dev Jobs Found in Last 24h. See:
◆ Checkmarx | Senior Solutions Engineer
◆ Location: Italy
◆ Remote | Full Time
See all 21695 jobs → link in bio
◆ Checkmarx | Senior Solutions Engineer
◆ Location: Italy
◆ Remote | Full Time
See all 21695 jobs → link in bio
An Introduction to ZAP by Checkmarx - Official Version
YouTube video by ZAP
youtu.be
June 30, 2025 at 3:15 PM